Active Directory and Domain Controllers

Study Notes

Active Directory (AD) is a Microsoft network management service used to manage and control network communication.
A Domain Controller is the central hub for network communication, managing user credentials, computer accounts, security policies, and files.

A directory service designed by Microsoft for network management.
It stores and manages network resource information, including user accounts, computers, and group policies.
It authenticates and authorizes users in a Windows environment.

A computer server that hosts Active Directory and runs the Active Directory Domain Services (AD DS).
AD DS manages directory data, authentication, and data replication across multiple Domain Controllers.

It authenticates user credentials and verifies identity.
Generates a security token allowing access to network resources.
Shares authentication tokens with other applications, enabling users to access services like email and file sharing.

Centralized Administration: Manages user accounts, computers, applications, and security policies from a single platform.
Unified Authentication: Simplifies user logins and access controls across the network.
Resource Management: Allows administrators to inventory and manage network resources.
Security Policy Enforcement: Implements consistent security policies across the network.

Resources: Network devices like printers, scanners, and network shares.
Users: Accounts and groups representing users with specific access rights.
Services or Applications: Examples include email services and authorization servers.

Hierarchical Organization: Manages network resources and security policies through a tree-like structure.
Centralized and Distributed Database: Network data is centralized for consistent access but can be replicated across multiple Domain Controllers for redundancy and performance.
Scalability: Efficient data access even in large networks thanks to an advanced indexing system.
Security: Administrators can manage users and groups with specific rights through access controls.
Flexibility: Supports the customization of pre-defined objects and the addition of new objects.
Policy-Based Administration: Allows for the creation of group policies, defining the behavior of users and devices on the network.

X.500: A standard defining the structure and organization of directory services, establishing the basis for Active Directory's hierarchical structure.
LDAP (Lightweight Directory Access Protocol): Simplified version of X.500, using TCP/IP, for directory access protocol. Enables integration with other operating systems.

Physical Structure: Consists of sites, which are physical locations where DCs communicate. A site typically represents an area connected by a LAN. Sites can be connected through WANs across geographical locations.
Logical Structure: Organizes network resources based on the organization's structure. Key components include:
- Organizational Units (OUs): Group objects like users and computers within a domain, allowing for efficient management.